Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: opjpIfBGjR+NoRagPDqR1EFuyUOW8QxIYbKwmhy+FWY=
Subject key identifier: 53:C2:68:75:A0:A9:BF:A3:45:68:F7:4E:30:EF:39:5A:19:58:6E:C7
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 0232
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 0231
Signing time: Wed 04 Jun 2025 04:12:50 +0000
Manifest this update: Wed 04 Jun 2025 04:12:49 +0000
Manifest next update: Fri 06 Jun 2025 04:12:49 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: e9dCyr92vuCGkUypGcaZRMrhhfIZlNqipj4NNTaTijo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Jun 4 04:12:49 2025 GMT
Not After : Jun 6 04:12:49 2025 GMT
Subject: CN=683fc7c2-8e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:91:5c:fe:5b:73:fe:9f:14:eb:27:d4:a5:
e4:ab:e3:5e:f1:46:8f:f7:9f:2a:42:96:53:14:33:
db:30:cf:e5:a4:6a:fc:05:e5:3d:92:76:6d:72:1b:
c9:3e:65:11:88:9c:6d:2c:2b:6f:1e:a6:19:e4:9d:
c5:a7:3b:2d:4f:a6:1d:f1:9c:bd:3f:14:75:74:df:
4d:9a:25:b7:23:02:08:4d:8f:17:81:96:4c:47:3e:
64:9a:61:64:2e:21:36:5e:23:0d:58:5c:0f:ef:fb:
72:17:9b:46:5e:0b:ca:3b:ba:d4:1d:ff:5a:bb:b7:
c9:6f:4a:fe:42:1d:0b:e2:5d:2f:26:92:e9:80:93:
e1:a2:b0:e4:ea:bb:43:6f:7d:6e:0d:40:36:c8:9b:
dc:cc:a4:9a:1a:df:41:ad:a1:3f:ff:a5:9e:75:a3:
7c:f5:67:d1:42:a1:f7:78:b3:72:b3:45:a9:65:15:
74:d4:f3:15:ba:18:7d:a7:ab:c0:56:f3:8f:0f:3a:
d7:1a:78:1e:a1:5e:86:43:5d:24:96:40:dc:66:dc:
d1:cc:71:a5:71:3b:0b:2e:62:1e:67:ab:5a:86:88:
78:b1:7d:1d:18:5d:ff:b7:0f:db:67:d1:36:6b:d3:
68:09:78:0c:ab:db:ce:e2:fd:60:c4:eb:ad:41:7f:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:68:75:A0:A9:BF:A3:45:68:F7:4E:30:EF:39:5A:19:58:6E:C7
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5e:6b:2f:bb:d8:ed:96:f8:6d:d1:57:d2:0e:9d:15:fe:65:
c9:78:dc:44:68:3a:a0:d4:0c:00:46:35:a0:a4:60:4e:fc:1d:
49:9d:62:e7:26:e6:53:c4:0f:7f:a7:be:c7:ae:82:3a:dc:fd:
15:8d:ae:18:9e:35:b0:58:70:00:13:a3:b3:45:43:fd:06:6c:
95:51:74:6b:e7:dd:30:66:68:2a:99:eb:ed:3f:fe:6b:99:eb:
7b:6a:94:9b:23:27:5d:5c:ee:7b:d5:c1:29:53:04:07:20:71:
c9:70:6d:b0:4f:5f:93:d0:ad:c6:15:b4:a9:e6:ef:e8:b6:1b:
02:de:bc:65:dc:1e:da:b5:e5:43:f4:a5:30:bb:6a:72:12:cc:
9a:d2:4d:41:22:e9:63:55:33:47:ff:0d:33:bb:d8:8f:c5:38:
a1:c9:4e:98:d5:05:0b:3e:68:4b:dc:14:61:d0:e7:22:ed:08:
91:a5:ef:43:6e:3b:a4:de:2d:96:68:60:fb:a8:8c:33:33:fe:
79:12:1b:f4:90:9f:6a:66:e4:e7:7e:bd:ae:3b:f6:63:26:84:
1a:84:c2:18:de:03:81:95:57:92:bf:78:5d:70:d6:d2:ff:28:
ec:03:5b:6c:1d:84:36:c7:2e:0e:ed:93:33:b6:ac:5c:55:eb:
4c:bd:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:08:29 2025 by rpki-client